CoreCVE
Back

HIGH

In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store containing the service processor user names and passwords for servers previously managed by that LXCA instance, and potentially decrypt those credentials more easily than intended

Published Jul 30, 2018

Description

In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store containing the service processor user names and passwords for servers previously managed by that LXCA instance, and potentially decrypt those credentials more easily than intended.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-312

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner lenovo
Published Jul 30, 2018
Updated Sep 16, 2024
Reserved Mar 27, 2018
Link CVE-2018-9065
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-9065
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-9065